Bug#347221: smstools: Format string attack in logging code

2006-01-09 Thread Florian Weimer
* Steve Kemp: > A DSA has just been released for smstools due to an insecure > usage of syslog in the logging code. Please mention the CVE name CVE-2006-0083 in the changelog when fixing this bug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contac

Bug#347221: smstools: Format string attack in logging code

2006-01-09 Thread Steve Kemp
Package: smstools Version: 1.16-1+b1 Severity: grave Justification: user security hole Tags: security *** Please type your report below this line *** A DSA has just been released for smstools due to an insecure usage of syslog in the logging code. The following patch will correct the issue